Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File: 0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier: bSpoLKSHLVLqIt53zRq24rrgWPmkRBrTwcpPy1vP8v4=
Subject key identifier: 9B:BB:B1:43:BD:C3:E2:5D:6D:CE:39:D2:08:AD:A2:0B:37:95:5C:D9
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial: 019D39E598BC4CEA02DFEF28E9D71C7442E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number: 13A7
Signing time: Sun 29 Mar 2026 14:00:41 +0000
Manifest this update: Sun 29 Mar 2026 14:00:41 +0000
Manifest next update: Mon 30 Mar 2026 14:00:41 +0000
Files and hashes: 1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: 07zIzEdxc+ofiBSsTGb7oF0fmSW888OYg2ha9slRGFE=)
2: vTP-a1JInjsi0zs43YUjMr0tQhw.roa (hash: AksN4qlHwN45fSCKy9ilLdGULzgppZOt64KCaKI1vlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:98:bc:4c:ea:02:df:ef:28:e9:d7:1c:74:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Validity
Not Before: Mar 29 14:00:41 2026 GMT
Not After : Mar 30 14:00:41 2026 GMT
Subject: CN=9bbbb143bdc3e25d6dce39d208ada20b37955cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:66:ef:9d:8c:23:82:33:02:aa:66:01:41:
6a:16:bb:13:60:d9:82:e6:a5:1d:89:98:e3:5c:5b:
6f:7a:fc:45:d2:4d:9b:cb:9c:d4:63:a2:c1:70:da:
0c:21:d4:06:9e:10:28:88:13:ac:da:98:2d:f3:5c:
5a:29:89:8a:eb:e2:63:41:a3:90:2f:53:06:31:0b:
8a:86:f6:34:34:63:20:32:96:69:e8:6f:8c:12:19:
6c:e2:4e:b1:0f:f7:65:fe:5f:2c:c7:f5:15:de:bf:
22:a2:84:2c:46:be:98:e4:48:7b:23:a6:10:df:2a:
eb:22:9a:cb:bf:bc:86:db:b9:56:b6:72:05:51:93:
fb:0e:ba:d8:b1:bf:40:c5:9f:07:77:d3:35:ce:2b:
a2:04:ef:4b:06:f9:ed:48:99:d8:68:9c:f0:ef:ce:
1d:23:6a:2a:e4:fe:f7:ab:3d:ea:86:be:d0:26:4f:
68:71:07:d7:c6:a1:61:d5:57:94:ef:81:ce:8a:50:
2e:2a:93:f4:b6:f3:41:ee:84:51:d6:0d:f7:b8:a6:
6b:ad:5c:48:e5:42:5c:fd:11:eb:19:bd:da:f4:47:
cf:ef:30:35:b9:fe:34:ce:a7:4d:fe:aa:39:22:e9:
89:57:8b:a1:da:67:ee:f4:e9:26:e8:a2:98:d8:4c:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BB:B1:43:BD:C3:E2:5D:6D:CE:39:D2:08:AD:A2:0B:37:95:5C:D9
X509v3 Authority Key Identifier:
keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3f:c8:89:08:ef:a9:72:f6:2a:04:db:26:a1:2f:c9:40:e6:
3e:27:bf:22:7c:47:9f:4f:ae:23:d5:a3:d2:56:53:f0:fa:a8:
f9:37:31:00:56:6c:b1:fa:4f:f5:70:93:d8:d5:7c:c8:66:15:
00:29:e9:c7:f7:a3:d8:9f:f2:72:b9:f1:0c:45:c4:1c:91:e5:
f6:83:44:83:e9:5a:4c:36:aa:60:8b:07:22:c0:c8:2a:53:65:
1b:14:18:38:9d:24:44:93:7c:c6:12:ec:9f:a6:ff:7f:2a:da:
ad:44:38:10:65:fd:c7:d5:d2:3b:b5:60:28:2c:38:51:9c:f9:
4c:c7:8c:e2:be:cf:ce:b0:89:ea:35:dc:4c:4b:ab:e4:25:cd:
1c:cb:13:53:47:49:3f:1a:8c:ad:b2:df:b8:5d:72:db:ee:83:
f9:66:6d:f8:15:04:54:b9:29:9b:15:c6:48:3e:cf:e2:ec:d9:
02:c8:61:be:43:f3:e6:7a:56:75:59:6f:e8:c0:18:4a:d2:5a:
6d:ea:a4:d8:b5:5e:4d:af:d9:16:ff:11:ab:1b:85:20:ec:da:
5e:85:27:d2:bc:c3:77:46:68:13:44:7c:48:c3:02:f2:b5:83:
34:6a:da:8b:15:c1:e6:7f:71:e6:b4:60:1e:f6:06:4d:ef:83:
40:d9:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:30 2026 by rpki-client